Buffer overflow in libcurl - CVE-2018-14618

Vulnerability identifier: #VU14691

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14618

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists on systems with a 32-bit size_t and that use more than 2 GB of memory for the password field due to a buffer overflow in Curl_ntlm_core_mk_nt_hash() in 'lib/curl_ntlm_core.c' when handling malicious input. A remote unauthenticated attacker can send a specially crafted NTLM authentication password, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

libcurl
Debian Linux
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Slackware Linux
Opensuse
Fedora
curl (Alpine package)
curl
Dynamic System Analysis (DSA) Preboot
Secured Component Verification (SCV)
Flex System Chassis Management Module (CMM)
Dell EMC Unisphere Central

Update to version 7.61.1.

libcurl - update to 7.61.1
curl (Alpine package) - update to 7.61.1-r0
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
Secured Component Verification (SCV) - update to 1.92.0
Flex System Chassis Management Module (CMM) - update to 2pet18a-2.5.14a
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.55.1-14.fc27, 7.59.0-7.fc28, 7.61.1-1.fc29

• https://curl.haxx.se/docs/CVE-2018-14618.html

• Remote code execution in libcurl
• Slackware Linux update for curl
• Debian update for curl
• Amazon Linux AMI update for curl
• OpenSUSE Linux update for curl
• OpenSUSE Linux update for curl
• Gentoo update for cURL
• Red Hat update for curl
• Buffer overflow in curl (Alpine package)
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Multiple vulnerabilities in Dell Secured Component Verification (SCV)
• IBM Dynamic System Analysis (DSA) Preboot update for cURL libcurl
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Fedora 27 update for curl
• Fedora 29 update for curl
• Fedora 28 update for curl